$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft File: Xdczb6kVchzjv-4hf06ZFk25Uys.mft (raw, json) Hash identifier: 0mPJsPCQk4Qt+4PP9e0eyjRmwAuZLY1piYpwWbZvIug= Subject key identifier: E3:CB:5B:C7:22:07:0F:5C:45:B2:05:36:FB:D6:57:17:2A:35:D4:51 Authority key identifier: 5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B Certificate issuer: /CN=5dd7336fa915721ce3bfee217f4e99164db9532b Certificate serial: 019A4B4E65DF11CB1231C2233CC96EF8D7AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft Manifest number: 1711 Signing time: Mon 03 Nov 2025 20:00:20 +0000 Manifest this update: Mon 03 Nov 2025 20:00:20 +0000 Manifest next update: Tue 04 Nov 2025 20:00:20 +0000 Files and hashes: 1: DkHIx2qomTMRxi5txwcyeQJUMC4.roa (hash: aUooC/gZIs2knffE4CSZxz4fOwgHg5KB9hMX38VnhFA=) 2: TBZUFVuLjgaJ-XADpnEKR7pLEmo.roa (hash: DDp1P+ue/jG2hxWSfwXECX5hRH8hg4KzLSyGRRpINWI=) 3: Xdczb6kVchzjv-4hf06ZFk25Uys.crl (hash: Wsf7vM5xeSzPwiOxMoxbEOI5+o1b4yl3KFnNh934+Yw=) 4: YPWPyR2PrV8C7bZPatIE86usWRg.roa (hash: oPtwylk/25k8zLps+NlaEoKI3y6QpsbDE1m1nmcztaE=) 5: bOO4UAkgvXb-rMii_89NfL-6bTI.roa (hash: NL1lyy08FzW+vpLdiv9to5VdvnEWSxR942DR56bOFW4=) 6: gVKSPISn7WOtLgcYX82T_CB0k8w.roa (hash: Ym9+8pOqwFm62YT9wllYnMmkH1dr3oLLznDhqgDjeLA=) 7: gincnI_gYVCe8a-UMsJw8uGTHk4.roa (hash: /B3bMOP6Q4JtPQrlZm8v7Y12jGfc6csMXusEpKv3HP0=) 8: pjijzSQUxqzDP8xeNUFbC_-9WRc.roa (hash: idDVoTbAeotEcfiyv3LfRPsc1HSc8qISJahqgpNH+A0=) 9: sbcX3dD-IzvBjjiuOceGuIya184.roa (hash: OgKPXFMnHlbOLdXfkb/OHlLV/72L9AOodiZ4Hgh7ss4=) 10: tmZ0o6fg7g2ZAFjY0aabWuJemGY.roa (hash: a2zNXAKUIiHFRxrlG+HegKhw0N5htHdLY3b/L14Vpl4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 04 Nov 2025 20:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4b:4e:65:df:11:cb:12:31:c2:23:3c:c9:6e:f8:d7:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd7336fa915721ce3bfee217f4e99164db9532b Validity Not Before: Nov 3 20:00:20 2025 GMT Not After : Nov 4 20:00:20 2025 GMT Subject: CN=e3cb5bc722070f5c45b20536fbd657172a35d451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:05:14:5a:f4:1d:5d:f2:03:2b:04:df:ae:b9: 7d:a7:87:a9:66:15:5f:67:f3:87:47:4d:55:85:c5: 4d:41:f6:99:6e:d8:10:ad:71:f8:f8:30:74:5a:3a: 13:bf:5a:b6:c3:e4:59:b8:08:01:20:3d:bf:cc:ea: aa:77:cd:86:96:0e:76:fc:f8:72:5e:b7:8b:5a:54: 6d:f0:74:c5:fe:59:bd:58:c6:36:c2:b3:44:ad:a1: de:c2:f8:5a:ee:56:5b:a3:cf:99:1c:91:82:f8:af: cb:92:57:78:2a:08:b9:28:ed:43:a2:24:19:85:86: bc:b2:bc:04:fc:d5:b3:49:e7:9d:fd:f6:15:cd:19: cf:c9:ee:44:db:e8:63:78:cb:0f:fb:ef:b5:bc:85: b9:e3:9f:f0:da:17:69:ed:67:84:c5:af:16:97:99: 45:b8:ef:eb:33:90:59:f0:36:c7:ff:2e:6f:b1:86: ac:91:2d:4e:7b:5a:18:e0:43:a5:aa:e1:d2:d1:f6: b9:33:9c:55:67:d6:d6:7c:ef:30:69:58:bd:3a:e6: 34:cd:69:a2:1c:b2:a9:8b:3f:64:52:69:fd:bb:ec: fd:e4:aa:cf:fe:81:6c:9e:f2:0d:b3:8b:98:94:29: 43:d6:a3:62:ab:55:e0:89:39:55:48:6d:fc:27:a8: 85:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:CB:5B:C7:22:07:0F:5C:45:B2:05:36:FB:D6:57:17:2A:35:D4:51 X509v3 Authority Key Identifier: keyid:5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:2a:c3:e8:e1:69:dd:cc:df:e8:f1:96:26:2a:8b:ec:88:31: 33:33:3d:63:90:c5:4a:c6:73:65:a2:fd:89:32:95:3b:7b:db: 27:ff:5d:11:be:ae:3f:d2:a7:af:43:21:8e:77:88:69:ee:e3: 6c:1d:b3:10:93:5a:6b:ab:83:7f:0c:83:ae:5c:9b:f1:0f:fc: 87:8e:d3:21:b7:ce:b3:22:6b:2a:d8:a9:11:af:8e:e0:db:36: 99:2e:7e:20:be:ea:c6:d6:19:8c:98:3d:f1:ee:52:0a:84:a1: 36:10:f9:7d:37:cd:c4:67:be:eb:dc:8a:3a:93:34:a4:e4:40: 9d:e8:63:c5:74:f3:4b:6e:52:a2:fb:fb:33:fd:3d:3e:2e:29: c8:d9:83:f7:03:5f:6f:78:44:45:52:c3:4e:93:4b:39:8b:b2: df:4a:ed:b3:f7:78:72:e2:db:ab:f9:e9:bf:4f:6a:b3:48:78: 1e:b0:f0:44:64:25:f4:d5:f7:51:1c:15:d6:4c:98:e8:cb:10: 1e:a1:de:b5:93:85:73:2b:da:f0:ca:54:0d:32:5c:d4:f5:66: 02:03:b6:e8:4a:af:48:d8:27:64:36:0e:df:3e:27:7b:8e:ef: d9:15:99:91:f6:2a:6f:a6:2f:2a:0e:b1:39:6a:37:dc:16:b6: 28:84:36:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpLTmXfEcsSMcIjPMlu+NevMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDczMzZmYTkxNTcyMWNlM2JmZWUyMTdmNGU5OTE2NGRi OTUzMmIwHhcNMjUxMTAzMjAwMDIwWhcNMjUxMTA0MjAwMDIwWjAzMTEwLwYDVQQD EyhlM2NiNWJjNzIyMDcwZjVjNDViMjA1MzZmYmQ2NTcxNzJhMzVkNDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowUUWvQdXfIDKwTfrrl9p4epZhVf Z/OHR01VhcVNQfaZbtgQrXH4+DB0WjoTv1q2w+RZuAgBID2/zOqqd82Glg52/Phy XreLWlRt8HTF/lm9WMY2wrNEraHewvha7lZbo8+ZHJGC+K/Lkld4Kgi5KO1DoiQZ hYa8srwE/NWzSeed/fYVzRnPye5E2+hjeMsP+++1vIW545/w2hdp7WeExa8Wl5lF uO/rM5BZ8DbH/y5vsYaskS1Oe1oY4EOlquHS0fa5M5xVZ9bWfO8waVi9OuY0zWmi HLKpiz9kUmn9u+z95KrP/oFsnvINs4uYlClD1qNiq1XgiTlVSG38J6iFCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOPLW8ciBw9cRbIFNvvWVxcqNdRRMB8GA1UdIwQY MBaAFF3XM2+pFXIc47/uIX9OmRZNuVMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRjemI2a1ZjaHpqdi00aGYwNlpGazI1VXlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9lNzQ0YmQtZjZkOS00Zjc0LThjMDEt OGM0YmM0NTkyN2EzLzEvWGRjemI2a1ZjaHpqdi00aGYwNlpGazI1VXlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9lNzQ0YmQtZjZkOS00Zjc0LThjMDEtOGM0YmM0NTkyN2Ez LzEvWGRjemI2a1ZjaHpqdi00aGYwNlpGazI1VXlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABSrD6OFp 3czf6PGWJiqL7IgxMzM9Y5DFSsZzZaL9iTKVO3vbJ/9dEb6uP9Knr0MhjneIae7j bB2zEJNaa6uDfwyDrlyb8Q/8h47TIbfOsyJrKtipEa+O4Ns2mS5+IL7qxtYZjJg9 8e5SCoShNhD5fTfNxGe+69yKOpM0pORAnehjxXTzS25Sovv7M/09Pi4pyNmD9wNf b3hERVLDTpNLOYuy30rts/d4cuLbq/npv09qs0h4HrDwRGQl9NX3URwV1kyY6MsQ HqHetZOFcyva8MpUDTJc1PVmAgO26EqvSNgnZDYO3z4ne47v2RWZkfYqb6YvKg6x OWo33Ba2KIQ2Gw== -----END CERTIFICATE-----Generated at Tue Nov 4 04:01:13 2025 by rpki-client